Processing of personal data

This document summarizes the basic principles of the treatment of personal data of users of our website www.xxx.cz (hereinafter referred to as the Website). The operator of the website Vladimír Bárta (hereinafter referred to as the Operator), with its registered office at Špindlerův Mlýn, Bedřichov 130,543 51, ID No.: 61241806, acts as the controller of personal data. The processing of personal data is carried out in accordance with the European Union Regulation 2016/679, the General Data Processing Regulation.

Data collected by the Operator

The data that the Operator collects in connection with a completed contact form on the Website includes the user's first and last name, telephone and email contact (hereinafter referred to as Personal Data) and the text of the message, or enquiry, in the contact form.
By consenting to the processing of Personal Data, the User grants consent to the Operator to process the Personal Data to the extent that it has been provided by the User, i.e. to the extent of the contact form on the Website. By consenting to the processing of Personal Data, the User consents to the use of Personal Data to identify the User and to send commercial offers. By giving consent, the User who is under 18 years of age declares that he/she has asked his/her legal representative (parent) for consent to the processing of his/her Personal Data.

The purpose for which the personal data is processed, who processes the data and for how long

The legal basis for the processing of Personal Data is this consent. On the basis of this consent, the Provider is entitled to process Personal Data for the purpose of ensuring the proper implementation of marketing activities, creating surveys and business statistics on behaviour, sending commercial communications within the meaning of Act No. 480/2004 Coll., on certain information society services (including sending commercial communications by electronic means), providing professional and marketing information, all by any means of communication, in particular via web services, e-mail, telephone and mail. It may also include advertising communications, targeted commercial offers, marketing research and analysis using data obtained from research and/or publicly available sources.
The Operator may also contact Users in the context of marketing research and analysis in order to improve the quality of the services provided on the Website. In order to carry out these offers and outreach, the Operator may use contract processors.
The Operator usually processes user data in its own computer systems, although it may also use the systems of third parties (so-called Processors). However, these parties will only have access to this data for as long as necessary and to the extent necessary to provide the service and meet legal requirements.
The data collected through the contact form is usually stored until the consent to process personal data is withdrawn and then usually 6-12 months after the withdrawal. Thereafter, only basic identification data and data on the granting/withdrawal of consent are usually stored for a reasonable period of time. All data provided by the user via the contact form is stored on a secure server.

User rights related to data protection and withdrawal of consent to the processing of personal data

The user has the right to withdraw his/her consent at any time, to correct or supplement personal data, to request restriction of processing, to object or complain against the processing of personal data, to request data portability, access to his/her personal data, to be informed of a personal data breach, erasure and other rights provided for in the GDPR.
This voluntary consent to the processing of personal data may be revoked by the user at any time, free of charge, by sending an email to info@pensionmonika.cz. Withdrawal of consent is also possible directly from each commercial communication sent by email. Withdrawal of consent does not affect the lawfulness of processing based on consent given prior to its withdrawal. Withdrawal of consent also does not affect the processing of personal data that the controller processes on a legal basis other than consent.